436 matches found
Design/Logic Flaw
The configuration utility in MatrikonOPC Security Gateway 1.0 allows remote attackers to cause a denial of service unhandled exception and application crash via a TCP RST packet...
CVE-2013-0666
CVE-2013-0666 affects MatrikonOPC Security Gateway 1.0. The vulnerability is a remotely exploitable DoS: sending a TCP RST packet to the active Health Monitor/Configuration paths (Port 30544/TCP) can trigger an unhandled exception in the configuration utility and crash the application. The incide...
CVE-2013-0666
The configuration utility in MatrikonOPC Security Gateway 1.0 allows remote attackers to cause a denial of service unhandled exception and application crash via a TCP RST packet...
AudioCoder Buffer Overflow Exploit (SEH)
Exploit for windows platform in category dos / poc !/usr/bin/env ruby Exploit Title:AudioCoder 0.8.18 Buffer Overflow Exploit SEH Download link :http://www.mediacoderhq.com/getfile.htm?site=dl.mediacoderhq.com&file=AudioCoder-0.8.18.exe Vulnerable Product:AudioCoder Date found: 30.04.2013 Date...
BlazeDVD Free Edition 6.1.1.6 Buffer Overflow
!/usr/bin/python Exploit Title:BlazeDVD Free Edition 6.1.1.6 Buffer Overflow Date: 27-03-2013 Exploit Author: metacom RST Vendor Homepage: http://www.blazevideo.com/dvd-player/ Download version 6.1.0.6: www.blazevideo.com/download.php?product=BlazeDVD Version: BlazeDVD Free Edition 6.1.1.6 Tested...
BlazeVideo HDTV Player 6.6.0.2 Buffer Overflow
Exploit Title:BlazeVideo HDTV Player Standard 6.6.0.2 SEH Buffer Overflow Date: 19-03-2013 Exploit Author: metacom RST Vendor Homepage: http://www.blazevideo.com/hdtv-player/ Download version 6.6.0.2: www.blazevideo.com/download.php?product=blazevideo-hdtv-std Version: BlazeVideo HDTV Player...
BlazeVideo HDTV Player Standard - .plf File Remote Buffer Overflow
BlazeVideo HDTV Player Standard - .plf File Remote Buffer Overflow source: https://www.securityfocus.com/bid/58624/info BlazeVideo HDTV Player Standard is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. Attackers may...
BlazeVideo HDTV Standard v.6.6.0.2 SEH Buffer Overflow
Exploit for windows platform in category dos / poc Exploit Title:BlazeVideo HDTV Player Standard 6.6.0.2 SEH Buffer Overflow Date: 19-03-2013 Exploit Author: metacom RST Vendor Homepage: http://www.blazevideo.com/hdtv-player/ Download version 6.6.0.2:...
BlazeVideo HDTV Player Standard - '.plf' File Remote Buffer Overflow
source: https://www.securityfocus.com/bid/58624/info BlazeVideo HDTV Player Standard is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. Attackers may leverage this issue to execute arbitrary code in the context of the...
Link hijacking attack one, two, three-vulnerability warning-the black bar safety net
Blog post author: lake2 TSRC Release date: 2012-11-09 Blog post content: With application security development, we are more concerned about application security vulnerabilities, in fact, in the application layer below the Transport Layer there are also many security risks and the security risks...
FreeBSD : moinmoin -- XSS via RST parser (4a8a98ab-f745-11e1-8bd8-0022156e8794)
MITRE CVE team reports : Cross-site scripting XSS vulnerability in the reStructuredText rst parser in parser/textrst.py in MoinMoin before 1.9.4, when docutils is installed or when 'format rst' is set, allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in the...
Juniper Junos SYN Cookie Protection DoS (PSN-2012-07-643)
According to its self-reported version number, the SYN cookie protection implementation of the remote Junos system has a denial of service vulnerability. If SYN flood protection is enabled and the SYN cookie protection threshold is exceeded, the server responds to connections with an RST, causing...
Moinmoin Cross Site Scripting
Hi, I reported the xss in moinmoin which is made possible via the RST parser / mark-up. Here is a demonstration / proof of concept of abusing the refuri via a javascript link. !rst "NotMe " , "MORELOL" Information about CVE-2011-1058 can also be found at...
Fedora 15 : moin-1.9.3-4.fc15 (2011-2219)
Bug 679523 - CVE-2011-1058 MoinMoin: XSS in the rst parser Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...
PYSEC-2011-6
Cross-site scripting XSS vulnerability in the reStructuredText rst parser in parser/textrst.py in MoinMoin before 1.9.3, when docutils is installed or when "format rst" is set, allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in the refuri attribute. NOTE: some...
moinmoin -- cross-site scripting via RST parser
MITRE CVE team reports: Cross-site scripting XSS vulnerability in the reStructuredText rst parser in parser/textrst.py in MoinMoin before 1.9.4, when docutils is installed or when "format rst" is set, allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in the refu...
PT-2010-4293 · Zabbix · Zabbix
Name of the Vulnerable Software and Affected Versions: Zabbix versions prior to 1.8.3rc1 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities in the formatQuery function. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via specific...
vBulletin nulled (validator.php) files/directories disclosure
Description: With this file you can see all files.sql - .tar.gz - .zip - .rar - .php - .anything / directories from the folder with vBulletin installed... Exploit: http://www.website.com/vBforum/validator.php Author: PaxNwo www.rstcenter.com...
2^6 TCP Control Bit - Fuzzer (No ECN or CWR)
!/usr/bin/perl 2^6 TCP Control Bit Fuzzer No ECN or CWR This code was written originally as a control bit fuzzer for the JunOS 3-9 crash mentioned in PSN-2010-01-623 and http://www.securityfocus.com/news/11571 However it will also be useful in fuzzing future IP stacks, such as userland IP stacks ...